$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS138387.roa File: AS138387.roa (raw, json) Hash identifier: xBv4JQFmkxORTHH1F8wILsYChgVyfCZ1hHU9wPimRkY= Subject key identifier: A9:DA:63:35:2B:EE:32:8B:B0:C4:99:46:DB:25:5A:8D:76:E9:1F:7C Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 60AE8EE2170F1A2DE36772005CE329E5AEF1D52F Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS138387.roa Signing time: Thu 28 May 2026 16:01:17 +0000 ROA not before: Thu 28 May 2026 15:56:17 +0000 ROA not after: Thu 27 May 2027 16:01:17 +0000 asID: 138387 IP address blocks: 240e:bf:b8d8::/48 maxlen: 48 240e:bf:b8d9::/48 maxlen: 48 240e:bf:b8da::/48 maxlen: 48 240e:bf:b8db::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ae:8e:e2:17:0f:1a:2d:e3:67:72:00:5c:e3:29:e5:ae:f1:d5:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 28 15:56:17 2026 GMT Not After : May 27 16:01:17 2027 GMT Subject: CN=A9DA63352BEE328BB0C49946DB255A8D76E91F7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1d:5f:1e:a7:e5:f7:ed:fc:e5:03:8f:61:71: fc:3a:ac:d7:52:52:61:1a:8d:f0:db:23:99:9f:12: 2c:94:30:be:7f:42:f7:60:b2:94:37:df:1c:78:82: 29:ef:12:f9:e7:d6:c7:52:b6:a0:35:1f:d6:a2:87: f1:db:54:0b:bd:d7:23:a0:64:f8:49:b4:06:f8:d3: e1:6d:ab:68:e1:ca:1f:2b:7f:5d:19:47:8c:d9:c3: 9c:d6:c8:b1:5c:61:72:ba:49:58:5b:90:9b:5f:c9: 3d:18:1b:e3:99:77:50:ee:3a:8b:6d:2e:c5:7d:c0: d7:cc:b5:f1:3b:ac:e3:f2:46:f3:03:54:f1:00:5a: b4:67:37:06:18:a1:20:58:7e:72:8e:4a:4d:f9:0d: 00:8c:00:d1:10:a6:43:e8:ad:6f:8b:ca:30:ea:c3: 6a:ee:3d:73:d6:49:5b:9e:4a:36:e4:af:f8:95:18: b8:22:71:c3:b2:9b:6e:16:7f:4c:d2:44:69:cb:98: 29:e6:b5:53:be:58:f3:8a:da:92:c8:5a:14:b0:c9: 74:31:33:39:17:d5:9e:5a:eb:b2:70:3f:ea:69:59: 38:bc:1d:b2:a6:26:76:0d:9d:8f:88:d4:b0:51:fe: b5:0a:a7:3d:8d:bc:e1:d5:d4:49:91:e2:4f:ec:1e: d7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DA:63:35:2B:EE:32:8B:B0:C4:99:46:DB:25:5A:8D:76:E9:1F:7C X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS138387.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:bf:b8d8::/46 Signature Algorithm: sha256WithRSAEncryption 73:8f:c0:14:63:2b:5b:c4:72:2b:3e:fb:4d:e6:63:19:2d:bb: 3c:e3:6d:39:84:e4:46:a0:39:34:8d:78:25:d1:be:ff:d1:c9: 1a:e4:dd:a3:bb:42:4f:c7:4c:4d:2b:bc:8f:20:8c:be:4d:2f: 44:d6:42:fb:46:18:36:18:c6:eb:5c:17:3d:c6:b0:c4:e7:d8: b9:67:ec:1f:24:c9:0f:5c:fc:56:35:31:9a:40:3f:46:c0:93: f8:bb:0e:2f:5e:08:29:2f:0a:9b:81:03:56:6e:1b:af:9e:29: 37:6c:cc:0a:e8:ef:ec:ea:72:cb:c3:f4:bd:1a:6c:99:aa:be: 5d:92:f3:6a:a4:53:6c:df:ee:56:52:81:c2:59:a6:d7:41:e8: 5c:e1:fc:ab:64:15:8b:d4:55:43:d9:f8:3c:39:00:28:99:b1: a1:37:fc:f7:9a:36:c6:f1:8e:31:c2:9f:86:74:68:7e:aa:a1: 27:49:48:ea:39:52:67:bc:82:ab:9f:ac:db:47:56:9f:ed:05: 4f:93:e4:68:16:82:75:88:0d:d8:86:99:ab:0c:e7:c1:d1:64: e6:1a:37:6d:b3:ed:06:84:eb:c7:54:85:72:78:92:e2:e3:a0: 98:e8:55:3b:4a:a4:ec:fb:87:91:b3:0a:23:79:58:e9:e6:d4: 6c:bb:32:14 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUYK6O4hcPGi3jZ3IAXOMp5a7x1S8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyODE1NTYxN1oX DTI3MDUyNzE2MDExN1owMzExMC8GA1UEAxMoQTlEQTYzMzUyQkVFMzI4QkIwQzQ5 OTQ2REIyNTVBOEQ3NkU5MUY3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJMdXx6n5fft/OUDj2Fx/Dqs11JSYRqN8NsjmZ8SLJQwvn9C92CylDffHHiC Ke8S+efWx1K2oDUf1qKH8dtUC73XI6Bk+Em0BvjT4W2raOHKHyt/XRlHjNnDnNbI sVxhcrpJWFuQm1/JPRgb45l3UO46i20uxX3A18y18Tus4/JG8wNU8QBatGc3Bhih IFh+co5KTfkNAIwA0RCmQ+itb4vKMOrDau49c9ZJW55KNuSv+JUYuCJxw7KbbhZ/ TNJEacuYKea1U75Y84rakshaFLDJdDEzORfVnlrrsnA/6mlZOLwdsqYmdg2dj4jU sFH+tQqnPY284dXUSZHiT+we14cCAwEAAaOCAecwggHjMB0GA1UdDgQWBBSp2mM1 K+4yi7DEmUbbJVqNdukffDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTM4Mzg3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJA4Av7jYMA0GCSqGSIb3DQEB CwUAA4IBAQBzj8AUYytbxHIrPvtN5mMZLbs84205hORGoDk0jXgl0b7/0cka5N2j u0JPx0xNK7yPIIy+TS9E1kL7Rhg2GMbrXBc9xrDE59i5Z+wfJMkPXPxWNTGaQD9G wJP4uw4vXggpLwqbgQNWbhuvnik3bMwK6O/s6nLLw/S9GmyZqr5dkvNqpFNs3+5W UoHCWabXQehc4fyrZBWL1FVD2fg8OQAombGhN/z3mjbG8Y4xwp+GdGh+qqEnSUjq OVJnvIKrn6zbR1af7QVPk+RoFoJ1iA3YhpmrDOfB0WTmGjdts+0GhOvHVIVyeJLi 46CY6FU7SqTs+4eRswojeVjp5tRsuzIU -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:30 2026 by rpki-client